CVE-2026-32553

HighCVSS 7.2

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

17th percentile - higher than 17% of all known CVEs

Summary

OttoKit versions up to 1.1.35 contain an unauthenticated Server Side Request Forgery (SSRF) vulnerability. An attacker can send requests from the server to internal resources.

Risk Assessment

An attacker can access internal services or data that are not publicly available, potentially leading to confidentiality breaches.

Recommendation

Upgrade OttoKit to the latest version that fixes this vulnerability.

Original NVD description (English source)

Unauthenticated Server Side Request Forgery (SSRF) in OttoKit <= 1.1.35 versions.